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Abstract 

We present two new quantum algorithms. Our first algorithm is a generalization of amplitude 
amplification to the case when parts of the quantum algorithm that is being amplified stop at 
different times. 

Our second algorithm uses the first algorithm to improve the running time of Harrow et al. 
algorithm for solving systems of linear equations from 0(k 2 log N) to 0(k log 3 k log N) where k 
is the condition number of the system of equations. 

1 Introduction 

Solving large systems of linear equations is a very common problem in scientific computing, with 
many applications. Until recently, it was thought that quantum algorithms cannot achieve a sub- 
stantial speedup for this problem, because the coefficient matrix A is of size N 2 and it may be 
necessary to access all or most of coefficients in A to compute x - which requires time f2(7V 2 ). 

Recently, Harrow, Hassidim and Lloyd 5 discovered a surprising quantum algorithm that allows 
to solve systems of linear equations in time O(logA^) - in an unconventional sense. Namely, the 
algorithm of [5] generates the quantum state \x) — X)i=i x i\i) with the coefficients X{ being equal to 
the values of variables in the solution x — (xi, X2, ■ ■ ■ , a; at) of the system Ax = b. 

The Harrow-Hassidim-Lloyd algorithm among the most interesting new results in quantum al- 
gorithms, because systems of linear equations have many applications in all fields of science. For 
example, this algorithm has been used to design quantum algorithms for solving differential equations 

mm- 

Besides N, the running time of the algorithms for systems of linear equations (both classical 
and quantum algorithms) depends on another parameter n, the condition number of matrix A. The 
condition number is defined as the ratio between the largest and the smallest singular value of A: 
k = max; 1^4 where iii are the singular values of A. 

I I 

In the case of sparse classical matrices, the best classical algorithm runs in time 0(i/kN) [5] while 
the HHL quantum algorithm runs in time 0(k 2 logiV), with an exponentially better dependence on 
N but worse-than-classical dependence on k. 

In this paper, we present a better quantum algorithm, with the running time 0(/vlog 3 «log N). 
To construct our algorithm, we introduce a new tool, the variable-time quantum amplitude amplifica- 
tion which allows to amplify the success probability of quantum algorithms in which some branches 
of the computation stop earlier than other branches. The conventional amplitude amplification 
[I] would wait for all branches to stop - possibly resulting in a substantial inefficiency. Our new 
algorithm amplifies the success probability in multiple stages and takes advantage of the parts of 
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computation which stop earlier. We expect that this new method will be useful for building other 
quantum algorithms. 

The dependence of our quantum algorithm for solving systems of linear equations on k is almost 
optimal. Harrow et al. [5 show that, unless BQP = P SPACE, time of fi(y~ o(1) ) 

is necessary for 

generating the state |x) that describes the solution of the system. 

2 Overview of main results 

2.1 Variable time amplitude amplification 

Informally, our result is as follows. Consider a quantum algorithm A which may stop at one of 
several times t\,...,t m . (In the case of systems of linear equations, these times corresponding to m 
runs of eigenvalue estimation with increasing precision and increasing number of steps.) To indicate 
the outcome, A has an extra register O with 3 possible values: 0, 1 and 2. 1 indicates the outcome 
that should be amplified. indicates that the computation has stopped at this branch but did not 
the desired outcome 1. 2 indicates that the computation at this branch has not stopped yet. 

Let pi be the probability of the algorithm stopping at time U (with either the outcome or 
outcome 1). The average stopping time of A (the I2 average) is 



T m ax denotes the maximum possible running time of the algorithm (which is equal to t m ). Let 



be the algorithm's output state after all branches of the computation have stopped. Our goal is to 
obtain \ip goo d) with a high probability. Let p SUC c — \&good\ 2 be the probability of obtaining this state 
via algorithm A. 

Our main result is 

Theorem 1 We can construct a quantum algorithm A' invoking A several times, for total time 



In contrast, the usual amplitude amplification [3] would run for time 0(-^===). Our algorithm 
A' provides an improvement, whenever T av is substantially smaller than T max . By repeating A' 
0(log -) times, we can obtain \4> g ood) with a probability at least 1 — e. 

Our algorithm A 1 is optimal, up to the factor of \ogT max . If the algorithm A has just one 
stopping time T — T av — T max , then amplitude amplification cannot be performed with fewer than 
Q( -j= ) steps. Thus, the term of is necessary. The term T max is also necessary because, in 

some branch of computation, A can run for T max steps. 

More details are given in section [3] First , in subsection 13. II we give a precise definition of how a 
quantum algorithm could stop at different times. Then, in subsections 13.21 and 13 . 31 we give a proof 
of Theorem [1] 

lr Thc first bit of the output state indicates whether we have the desired state \ip goo d) or not. Since |q| 2 > 1/2, we 
get IV'good) with probability at least 1/2. 




OLgood 1 1) o\lpgood) + abad\0)o\lpbad 




that produces a state a\l) <X> \il> g0 od) + /3|0) ® with probability \a\ 2 > 1/2 as the output 
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2.2 Systems of linear equations 

We consider solving a system of linear equations Ax — b where A — ((Hj)i,je[N]t x — ( x i)i£[N]i 
b = (&i)i£[Ari- We assume that A is Hermitian. As shown in [5], this assumption is without the loss 
of generality. 

Let \vi) be the eigenvectors of A and Ai be their eigenvalues. Similarly to [5], we assume that 
all A, satisfy - < A, ; < 1 for some known k. We can then transform the state |6) = Yn=i ^1*) 
\x) = Y17=i x i\i) as f°ll° ws: 

1. If, in terms of eigenvectors \vi) of A, we have \b) = J2i c i\ v i)i then \x) = J2i j~\ v i)- 

2. By eigenvalue estimation, we can create the state \b') = Ci\Vi)\\i) where Aj are the estimates 
of the true eigenvalues. 

3. We then create the state 

i n= vjc,K,i«(-L| 1)+ fr^:io)). a. 

Conditional on the last bit being 1, the rest of state is Yli j~\ v i)\^i) which can be turned into 
an approximation of |i) by running eigenvalue estimation in reverse and uncomputing Ai. 

4. We then amplify the part of state which has the last qubit equal to 1 (using amplitude ampli- 
fication) and obtain a good approximation of |x) with a high probability. 

Theorem 2 J5jj Let C be such that the evolution of the Hamiltonian H for time T can be simulated 
in time C min(T, 1). Then, we can generate \tp') satisfying — ^'|| < e in time (^-)- 

The main term in the running time, k 2 is generated as a product of two k's. First, for H^ - < 
it suffice that the estimates Ai satisfy |Aj — A*| = O(eAj). Since Ai = f2(l//c), this means | A» — Ai| = 
O(-). To estimate Ai within error 0(— ), we need to run H for time O(f). Second, for amplitude 
amplification, we may need to repeat the algorithm generating \b") O(k) times - resulting in the 
total running time 0(« 2 /e). 

For eigenvalue estimation, the worst case is when all of most of Ai are small (of order 9(1/k)). 
Then, |A$ — Aj| = O(-). and eigenvalue estimation with the right precision indeed requires time 
©(f)- 

For amplitude amplification, the worst case is if most or all of Ai are large (constant). Then, the 
coefficients -j- can be of order 0(1/k) and O(k) repetitions are required for amplitude amplification. 

We now observe that the two 0(k)'s appear in the opposite cases. One of them appears when 
Ai is small (Ai ~ k) but the other appears when Ai is large (Ai ~ 1). 

If all eigenvalues are of roughly similar magnitude (e.g., A € [a, 2a] for some a), the running time 
becomes 0(n/e) because we can do eigenvalue estimation in time to error ea in 0(l/ae) and, for 
eigenvalue amplification, it suffices to repeat the generation of \b") O(na) times (since the amplitude 
of 1 in the last qubit of \b') is at least for every Uj). Thus, the running time is 




The problem is to achieve a similar running time in the general case (when the eigenvalues Ai can 
range from k to 1). 

To do that, we first design a version of eigenvalue estimation in which some branches of com- 
putation (corresponding to eigenvectors with larger eigenvalues Ai) terminate earlier than others. 
Namely, we start by running it for O(l) steps. If we see that the estimate Ai for the eigenvalue is 
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such that the allowed error 0(eXi) is more than the expected error of the current run of eigenvalue 
estimation, we stop. Otherwise, we run eigenvalue estimation again, doubling its running time. 
This doubles the precision achieved by eigenvalue estimation. We continue this until the precision 
of current estimate becomes better than the allowed error of O(eXi). 

This gives a quantum algorithm in which different branches of computation stop at different 
times. We apply our variable-time amplitude amplification to this quantum algorithm. This gives 
us 

Theorem 3 Let C be such that the evolution of the Hamiltonian H for time T can be simulated in 
time Cmin(T, 1). Then, we can generate \ip'} satisfying \\ip — < e in time 



We give more details in section 01 

3 Variable- time amplitude amplification 
3.1 Model 

How can a quantum algorithm have different branches of computation stopping at different times? 
We start by giving a precise definition of that. 

We require the state space of A to be of the form H = H ( ^)'H C be the Hilbert space of A, consisting 
of the 0-1-2 valued outcome register H and the rest of the Hilbert space H c . Let \ipi), ■ . ■ , \ip m ) be 
the states of A at times t\, . . . ,t m . We insist on the following consistency requirements. 

1. For each i G {1, . . . , to}, the description of the algorithm must define a subspace Hi of H in 
which the computation has stopped. Those subspaces must satisfy 



2. The state can be expressed as 

\A) = cm|0) (g) |V>i,o) + "mI 1 ) ® \ipi,i) + a i>2 |2) ® ^,2), 
with \ipi t o) G %i, G T-Li and ^2) G H H {Ui)^- (When i = to, we have |?/Vo) = IVw), 

IV'm.l) = \i>good)> l^m,2) = U .) 

3. We must have 

•PffJ^i+1,0) = \i>i,o) and P Hi \ip l+1 .i) = \ipi t i). 

That is, the part of the state where the computation stopped at time t, should not change 
after that. 

The success probability of A is p SUC c — |a m! i| 2 . We also define p SUC c,i = |o;i,i| 2 , the probability of A 
succeeding before time ti. The probability of A stopping at time U or earlier is 



The probability of A stopping at exactly time U is p s top.i — Pstop,<i for i — 1 and p s top,i = 
Pstop,<i — Pstop,<i—i f° r i > !• We will also use the probability of A stopping later than time ti, 
defined as 




Hi C Ti.2 ■ ■ ■ C T~i m — H. c . 



Psto P ,<t = |«i,o| 2 + |ai,i| 2 - 



Pstop.>i 



\<Xi,2\ 2 = 1 - Pstop,<i- 
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The average stopping time of A (the I2 average) is 



Tav = /$>t? 



The maximum stopping time of A is T ma2 . = t m . Our goal is to amplify the success probability to 
0(1), by running A for time (r max log 5 T max + log 15 T m 

3.2 Tools 

Our variable-time amplitude amplification uses two subroutines. Thr first is a result by Aaronson 
and Ambainis [1] who gave a tighter analysis of the usual amplitude amplification algorithm [4] . 

We say that an algorithm A produces a quantum state with probability p if the following is 
true: 

• The algorithm has two output registers R and S (and, possibly some more auxiliary registers); 

• Measuring R gives 1 with probability p and, conditional on this measurement result, the S 
register is in state 

Lemma 1 JT/ Let A be a quantum algorithm that outputs a state \ip) with probability S < e where 
e is known. Furthermore, let 

ft 1 

m < ■= - -. (2) 

4 arcsin \Jt 2 

Then, there is an algorithm A' which uses 2m + 1 calls to A and A^ 1 and outputs a state \ip) with 
probability 

^pls] [2m + If 6. (3) 



The algorithm A' is just the standard amplitude amplification [1] but its analysis is tighter. 
According to the usual analysis, amplitude amplification increases the success probability from 5 
to 0(1) in 2m + 1 = O(-j-) repetitions. In other words, 2m + 1 repetitions increase the success 

probability fi((2m + l) 2 ) times. Lemma [T] achieves an increase of almost (2m + l) 2 times, without 
the big-fi factor. 

This is useful if we have an algorithm with k levels of amplitude amplification nested one inside 
another. Then, with the usual amplitude amplification, a big-f2 constant of c would result in a c k 
factor in the running time. Using Lemma [1] avoids that. 

Our second subroutine is a version of amplitude estimation from [2] . 

Theorem 4 21 There is a procedure Estimate(„4, c,p, k) which, given a constant c, < c < 1 
and a quantum algorithm A (with the promise that the probability e that the algorithm A outputs 
1 is either or at least a given value p) outputs an estimate e of the probability e such that, with 
probability at least 1 — ^ , we have 

(i) \e-e\<ceife> p; 

(ii) I = ife = 0. 

The procedure Estimate^, c,p, k) uses the expected number of 



evaluations of A. 




2 [*Q requires the probability to be exactly e but the proof works without changes if the probability is less than the 
given e. 
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3.3 The state generation algorithm 



We now describe our state generation algorithm. Without the loss of generality, we assume that the 
stopping times of A are U = 2 l for i £ {0, . . . , to} for some to. We present a sequence of algorithms 
Ai, with the algorithm Ai generating an approximation of the state 

VKl| + l a i,2| V K,l| + |"t,2r 

in the following sense: the algorithm Ai outputs a state 

IO = VnWd + v / T^|o) ® |&) (4) 

for some and some rj satisfying r$ > l/9m. (To avoid the problem with nested amplitude 
amplification described in section [321 we only require > l/9m instead of = f2(l).) 

The algorithm Ai uses .Aj_i as the subroutine. It is defined in two steps. First, we define an 
auxiliary algorithm B\. 

1. If i = 0, 5j runs „4 for 1 step and outputs the output state of A. 

2. If i > 0, £>i runs A4-1 which outputs IV'i'-i)- Bi then executes A for time steps from 2 4_1 to 
2* on the parts of the state \ip"_i) where the outcome register is 2 (the computation is not 
finished) . 



Algorithm 1: Algorithm Bi 
Let pi = Estimate^, c, i,logm + 5). Then, Ai is as follows. 

1. Ifp> Ai = Bi. 

2- If V < gk> M = Amplify^, k) for the smallest k satisfying ^ < (2k + lfp < i. 

Algorithm 2: Algorithm _4j 
The overall algorithm A' is given as Algorithm [3] 



1. Run Estimate to obtain po — Estimate(£>o, c > \, log to + 5). 

2. For each i = 1, 2, . . . , to: 

(a) Use to define Ai and S^. 

(b) If i < m, run Estimate to obtain pi = Estimate^, c, ^, log to + 5). 

Amplify A m to the success probability at least 1/2 and output the output state of the amplified 

Am • 

Algorithm 3: Algorithm A' 

We now analyze the running times of algorithms Ai . Let Ti denote the running time of Ai . Let 
Ti be as defined in equation Q and let r[ be a similar quantity for the output state of Bi. Then, we 
have 



(> 



T l <[l + --—)^ f (T^+2^). (5) 



Lemma 2 

TL < 114- 

3m — 1 

Proof: The running time of B% is Tj_i + 2 l_1 . If .Aj = Hj, then the running time of Ai is the same 
and, also r*j = (because the two algorithms output the same state). If Ai is an amplified version 
of Bi, then: 

1. The running time of A t is (2k + l)(T^_i + 

2. By LemmaQ] we have r» > (1 — ^)(2fc + l) 2 r^ which implies 

V f 

Applying (J5J) recursively, we get 



T m < [ 1 + „ 

dm — 



, \ m rn I rn . — \ 

-) mw' 1 



The first multiplier, I 1 + 3w r_i ) can be upper-bounded by a constant. We now bound the product 



Lemma 3 

[ Pstop,>i 



., r- V V Ps 
j=i v i \ v ^ 



n^9<3(i 

3 

Proof: We consider the quantities 



0j = \(i®^ x wi)\ 2 

for j = i, i + 1, . . . , m. For j = i, we have 

0i = n\(l ® VmI^>| 2 = r i] fef , 2 = . (7) 

lOt.ll + I^Mf Psucc,i +Pstop,>i 

For j > i, we have Oj = Oj_x^f because amplification increases the probability of the "good" part 
of the state (which includes |1 ® p- times. Finally, we have 



w m ' m 

Psucc 

which follows similarly to ([7]). Putting all of this together, we have 

'4 Om Psucc, i "T Pstop,>i 

- 'i Oi Ti PsuccA 

By taking the square roots from both sides and observing that ^ is at most 9 (because r m < — 
and n > g^), we get 

m , — i 

^ «< Q /l i Pstop,>i 



,/n V 
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The Lemma follows by using \/\ + x < 1 + \Jx. \ 
By applying Lemma |3] to each term in ([B]), we get 

i=1 V V Psucc J i=1 \/Paucc 

The first sum can be upper bounded by 2 1 = 0(T max ). For the second sum, in its numerator, we 
have 



1 y /p s top,>i = a/ 2 2t 2 p s top,>i < mTav — T av \ogT„ 



where the inequality follows because each term a/2 21 2 p s top,>i is at most T av . Thus, the algorithm 
Am runs in time 

O T max + av log T m , 

\ V Psucc 

The algorithm A' amplifies A m from a success probability of r m > g^- to a success probability ri(l) . 
This increases the running time by a factor of 0{^Jm) — 0{^f\ogT max ) ■ 



4 Faster algorithm for solving systems of linear equations 

4.1 Unique-answer eigenvalue estimation 

For our algorithm, we need a version of eigenvalue estimation that is guaranteed to output exactly 
the same estimate with a high probability. The standard version of eigenvalue estimation [6j p. 
118] runs U — e~ lH up to 2™ times and, if the input is an eigenstate : H\ip) — \\tfj), outputs 
x e {0, £,§£,... , (2 "~ 1)7r } with probability 



1 sin 2 2 n (A-a;) 
sin 2 (A — x) 



. > -1 Sill i u\ — X . i 

P(s) = ^ , (8) 



(equation (7.1.30) from 6 ). We now consider an algorithm that runs the standard eigenvalue 
estimation k un i q times and takes the most frequent answer x ma j ■ 



1. If |A — x\ < ^-fr, then Pr[x ma j — x] > 1 — e. 

2. IfXe [x+ ^r,x+ thenPr[x maj € {x,x + l}} > 1 - e. 



Lemma 4 For k un i q — 0(j? log =■), we have 

— i 

2^+1 ? -i i i^maj 

2TI + 1 ] ? theft ± I / 

Proof: In the first case, ([8]) is at least (1 + e)A for the correct x and less than for any other 
x. Repeating eigenvalue estimation O(-ij) times and taking the majority allows to distinguish the 
correct x with a fixed probability (say 3/4) and repeating it O(^-logi) times allows to determine 
the correct x with a probability at least 1 — e. 

In the second case, the two values x and x + 1 are output with probability at least (1 — e)-T 
each. In contrast, for any other y = ^f, m g {0, 1, . . . , 2™ — 1}, we have 

i 1-e 1 3-e 

V — A > - — rrrTT + — 7T = - — —TT. 

|w 1 — 2 ra + 2™ 2"+ 

This implies 

p(y) -i^^ = (1+o(1)) (^W- 
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Thus, there is a constant gap between p(x) or p(x + 1) and p(y) for any other y. In this case, 
taking majority of 0(log -) runs of eigenvalue estimation is sufficient to produce x or x + 1 with a 
probability at least 1 — e. | 

We refer to this algorithm as UniqueEst(_ff, 2", e). 

When we use UniqueEst as a subroutine in algorithm [5j we need the answer to be unique (as 
in the first case) and not one of two high-probability answers (as in the second case). To deal with 
that, we will replace H with H + |f / for a randomly chosen 6 € [0, 1]. The eigenvalue becomes 
A' = A + If and, with probability 1 — e, 



A' e 



x + 



l-e 



for some integer x. This allows to achieve the first case for all eigenvalues, except a small random 
fraction of them. 



4.2 Main algorithm 

We now show that Theorem [TJ implies our main result, Theorem [31 We start by describing a variable 
running time Algorithm 2) This algorithm uses the following registers: 

• The input register / which holds the input state \x) (and is also used for the output state); 

• The outcome register O, with basis states |0), |1) and |2) (as described in the setup for variable- 
time amplitude amplification); 

• The step register S, with basis states |1), |2), . . ., |2m) (to prevent interference between various 
branches of computation). 

• The estimation register E, which is used for eigenvalue estimation (which is a subroutine for 
our algorithm). 

Hi, Ho, Hs and He denote the Hilbert spaces of the respective registers. 

From now on, we refer to e appearing in Theorem [3] as tfi na i- e without a subscript is an error 
parameter for subroutines of algorithm [4] (which we will choose at the end of the proof so that the 
overall error in the output state is at most efi na i). 

Our main algorithm is Algorithm [3] which consists of applying variable-time amplitude amplifi- 
cation to Algorithm SI 

We claim that, conditional on the output register being |l)o, the output state of Algorithm [4] is 
close to 

i \ 1 / 

Variable-time amplitude amplification then generates a state that is close to ife^n] ■ Fourier trans- 
form in the last step of algorithm [5] then effectively erases the S register. Conditional on S being 
in |0)s after the Fourier transform, the algorithm's output state is close to our desired output state 
Jfjp where 

\x) = ^2,on\vi)i. 

i 

Finally, performing Fourier transform and measuring produces |0),s with probability 1/m. Because 
of that, the success probability of algorithm [S] needs to be amplified. This adds a factor of 0(y/m) 
to the running time, if we would like to obtain the result state with probability 0(1) and a factor of 
0(\/rnlog i) if we would like to obtain it with probability at least 1 — e. 
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Input: parameters x\, . . . , x m € [0, 1], Hamiltonian H. 

1. Initialize O to |2), 5 to |1) and E to |0). Set j = 1. 

2. Let to = |~log 2 

3. Repeat until j > to: 
Stage j: 

(a) Let H' = H + ^-1- Using the registers / and S, run bf UniqueEst(iJ', 2 J , e). Let A' be 
the estimate output by UniqueEst and let A = A' — ^jf. 

(b) If eA > 2jTTj perform the transformation 

|2>o ® -> ^|l)o ® |2j) s + ^l-^-L^lOo ® |2j) s . (9) 

(c) Run UniqueEst in reverse, to erase the intermediate information. 

(d) Check if the register E is in the correct initial state |0)_e. If not, apply \2)o ® — > 
|0)o <8> |2j + 1)5 on the outcome register O. 

(e) If the outcome register O is in the state |2), increase j by 1 and go to step 2. 

Algorithm 4: State generation algorithm 

Input: Hamiltonian H . 

1. Generate uniformly random x±, . . . , x m <E [0, 1]. 

2. Apply variable-time amplitude amplification to Algorithm |4l with H and x\, . . . ,x m as the 
input. 

3. Apply a transformation mapping \2j)s — > |j)s to the 5* register. After that, apply Fourier 
transform to the S* register and measure. If the result is 0, output the state in the I 
register. Otherwise, stop without outputting a quantum state. 

Algorithm 5: Main algorithm 

Approximation guarantees. We now give a formal proof that the output state of Algorithm 
S]is close to the desired output state (fTUI) . 

Let \vi) be an eigenvector and Xi be an eigenvalue. For each j, the unique-value eigenvalue 
estimation either outputs one estimate Xij or one of two estimates \ t j and \ t j — with a high 
probability (at least 1 — e). Let ji be the smallest j for which the estimate A = Xij satisfies the 
condition eA > ^tt in step I3bl We call vi and A^ good if, for j — ji the unique- value eigenvalue 
estimation outputs one estimate Xi.j with a high probability. Otherwise, we call Xi bad. For both 
good and bad Xi, we denote Ai = Aj,^. 

We claim that the part of final state Algorithm 2] that has |1) in the output register O is close to 

|^>=y>ih-}/® (^|l)o® \2ji)s) 
and |^!') is, in turn, close to the state \tpideai) defined by equation pU|) . 
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The next two lemmas quantify these claims. Let 



5= £ M 2 



»:A< bad 



quantify the size of the part of the state \ip') that consists of bad eigenvectors. 



Lemma 5 Let \ip) be the output state of Algorithm^ and let Pi be the projection to the subspace 
where the outcome register O is in the state Then, we have 



\\PiW)-m\\ < ((2m + 37)e + 30W||. 



Proof: In section EOl 



I 



Lemma 6 



\\W)-\i>ideal)\\ < 



2r 



ll^ideoill- 



l + 2e 



Proof: In section FOl | 

When xi, . . . , x m G [0, 1] are chosen uniformly at random, the probability of any given Vi being 
bad is of order 0(e). Thus, E[S] = 0(e) and 



with the expectation taken over the random choice of xi, . . . , x m € [0, 1]. 
To achieve an error of at most e final, we choose e = @(efi na i/m). 

Running time. We now bound the running time of Algorithm [4] We start with two lemmas 
bounding the average running time T av and success probability p av ■ 

Lemma 7 T av , the ^-average running time of Algorithm^ is of the order 



EWPM) - \ip id eal)\\ = 0(me||Vwz||) 




(11) 



where k un i q is the quantity from Lemma [^J 



Proof: In section WM | 



Lemma 8 p. 



the success probability of Algorithm^ 



is 




(12) 



Proof: In section WM | 

By dividing the two expressions above one by another, we get 



Corollary 1 
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By Theorem [TJ the running time of algorithm [5] is 



O ( T max ^\ogT max H log 1 ' 5 T max 



'SUCC 



Since T ma2; = 0(2 m ) = 0(7)5 we have T max < and the running time is 

O log 1 ' 5 T max ) = O (-k umq log 15 -) = O (—k umq log 15 - 

V y/Psucc J V £ £> V 6 final £ 

with the 2nd equality following from e = @{eti na i/m). Since algorithm [S] needs to be repeated 
0(y/m log £ ^ 1 - ) times, the overall running time is 

O fc„„ ig log 15 - log = 0\ 3 ta £ log 2 , 

\ £ final e £ final J y e final e final J 

with the equality following from m = 0(log - ). 

4.3 Proofs of Lemmas about the quality of output state 

Proof: [of Lemma [5] Let \vi) be an eigenstate of A. Then, the eigenvalue estimation leaves \vi) 
unchanged (and produces an estimate for the eigenvalue Xi in the E register). This means that the 
algorithm above maps \x) = di\Vi) to 

J~]ai\vi)i <E) \4>i)o,S,E 

i 

where 

\<k)o,S,E = |l)o ® \<t>'i)s,E + |0) O ® 

We will show: 

• If \vi) is good, then \<j)'i)s,E is close to -j-\2ji)s ® \$)e- 

• If \vi) is bad, then \\4>i\\ does not become too large (and, therefore, does not make too big 
contribution to ||Pi|V>) - |^">ID- 

These two statements are quantified by two claims below: Claim[2]and Claim[5] The Lemma follows 
by combining these two claims and the fact that the sum of \cti\ 2 over all bad i is equal to 5. 

Before proving Claims [2] and [5j we prove a claim that bounds Xi (and will be used in the proofs 
of both Claim Hand Claim [5]). 

Claim 1 Let j = ji . Then 

1 - fl 3\ 1 
< Ai < - + - — . 



e2j+1 _ _ 2/23 
Proof: The first inequality follows immediately. For the second inequality, since j > ji — 1, we have 

Xi i— 1 ^ r. 

This means that the actual eigenvalue A satisfies 

A ^ 1 + £) ^ = ^ + 2^ 
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and 



A lJ <(l + e)A<-i- + i- + 



1 



e 2J 2i 2-J+ 1 ' 



As a consequence to this claim, we have 



1 

A~ " V2 + 3e 



e2 J . 



Claim 2 If is good, 



where C = (^r) 2 . 



KAi 



< (2m + 37)eC 



Proof: We express |<^) = J2j |2j)s® e- Furthermore, we group the terms of |$) in a following 
way: 

|<^> = I'M + 10=) + l^>) 



where 



10= 
I4>>) 



We have 



kA,; 



I0=> =-|2j<)ar®|0> s 

We first show that |j</><|| and ||</>>|| are not too large. 

For j < jj, the eigenvalue estimation outputs an answer that is more than \ t j with probability 
at most e. Therefore, the probability of step (f3b|) being executed is at most e. Moreover, if this step 
is executed, the estimate A' for the eigenvalue is at least -ij. Therefore, the coefficient of \l)o in ® 
is 

1 2J +1 e 



< 



By summing over all j < fa, we get 



3<3i 



3<3i 



€ < 



1 /2^ +1 f 



with the inequality following from the formula for the sum of a geometric progression. By using the 
right hand side of Claim [TJ we get 



ll<M 2 <$(i + 



3c 



C 



where C = (-^j-) 2 '■ If e < 0.1, we can upper-bound this by 1.6eC. 
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For j > ji , we have 1 1 <fii j \ \ 2 < e* Ji . (We only reach stage j if, in every previous stage k , eigenvalue 
estimation outputs an estimate that is smaller than A^. For each k € + 1, • • • , j — 1}, this 

happens with probability at most e.) 



Therefore, 



4 1 



3e 
2 



E 

3>3i 
2 



< 



*E( 



^1 cyuey 



E 



1G 



+1, 



1 + l 



e j-j 4 < 



1 -4e 



-C 



where the 2nd inequality follows from the right hand side of Claim Q] and the last equality follows 
from the formula for the sum of a geometric progression. If e < 0.1, we can upper bound this by 
36eC. Thus, both ||</><|| 2 and ||</>>|| 2 are small enough. 

For \<j>=), we first estimate the probability that algorithm reaches stage ji. 

Claim 3 Algorithm^ reaches stage ji with probability at least 1 — 2(m — l)e. 

Proof: For each j < ji, the eigenvalue estimation may produce an incorrect answer with probability 
at most e. This may lead to transformation (J9)) being executed with probability at most e. Moreover, 
this causes some disturbance for the next step, when eigenvalue estimation is uncomputed. Let |^) 
be the output of the eigenvalue estimation. We can split \ip) — + \ip") where consists of 
estimates A which are smaller than the one in the condition of step I3bl and consists of estimates 
that are greater than or equal to the one in the condition. Then, ||V'"|| 2 < e and, conditional on 
outcome register being |2), the estimation register is in the state \ip'}. If the estimation register was 
in the state \ip), uncomputing the eigenvalue estimation would lead to the correct initial state |0). If 
it is in the state \ip'}, then, after uncomputing the eigenvalue estimation, E can be in a basis state 



different from |0) with probability at most 



\w 



< e. 



Thus, the probability of the computation terminating for a fixed j < ji is at most 2e. The 
probability of that happening for some j < ji is at most 2(ji — l)e < 2 (to — l)e. | 
We now assume that the algorithm is started from stage ji. 

Claim 4 If Algorithm^ is started from stage ji (instead of stage 1), then 



I^Ji>B--=-|0)B 
KA 



<e 1 



Proof: Let 



E^IA) 



3e 



C. 



be the output of the eigenvalue estimation in stage j t . Then, | 2 > 1 — e and || \ip) — a^, |Aj) || 2 < e. 
Conditional on O being mapped to |1), the estimation register E is in the state 

iv/) = E^i A > 

A 

where j3\ = ^j- when A > e2 j +1 and (3\ — otherwise. By Claim [TJ we have 



€ [0,e2 J+1 ] C 



0, 2 



3e\ 1 



2 y a 



When A > 2 }+i , this implies 



fix 



ax 
kX 



ax ax 
kX k X 



< 1 



3e\ ax 



2 / kX 
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When A < „j +1 , we have (3\ = and 



By summing over all A ^ A, we get 



ip' — 

kX 



< 



1 + |) C E \*>\ 2 <(l+°i)eC. 



3e 



Therefore, (conditional on the outcome register being |1)) uncomputing UniqueEst leads to a state 
\tp) e with 



nX 



- (1+y )C 



Since the algorithm might not reach stage ji with probability at most 2(m — l)e, we have to 
combine the error bounds from Claims [3] and 01 This gives us 



^)e-\\Q)e 
kX 



< j 2m-l + y ) C. 



Combining this with bounds of 1.6eC and 36eC on \\ip<\\ and \\ip>\\ completes the proof of Claim 

m i 



Claim 5 If \vi) is bad, 

where C = (±A ( ) 2 . 
Proof: We express 

where 



< 30C 



Wi) = \4><) + \4>>) 
|0<)= I] |2i)s®|^) B! 

l^>)= E I2j>s ® 



We have 



< 



1 



(13) 



Here, the first inequality follows from the amplitude of |1) in ([9]) being -4-, A > e2 j" +1 and j < Ji + l. 
The second inequality follows from Claim [T] 

Starting from stage j + 1 , the probability of algorithm obtaining A < 2 j+i e i s a ^ most e at each 
stage. Therefore (similarly to the proof of Claim [5]), 



= E ii^h 2 ^ E 



j>ji+i 



j>ji+i 

2 oo 



2 oo 



E( 4e ) J ^ 



4c 



4e 



-C. 



(14) 
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The claim follows by putting equations (fT5|) and (|LT| together and using e < 0.01. § 
Proof: [of Lemma [5] We have 

|A* — A*! < ^TTT < (1 + ^A«, 

with the first inequality following from the correctness of the unique-output eigenvalue estimation 
and the second inequality following from the definition of A^. Let S = (1 + e)e. 
If \\i - Ad < 5A,-, then 



1 1 

a" 



< 



S 1 

1 - ^ A~ 4 



Therefore, we have - \ipideal)\\ < i^lll^ideai)!! and 



(l+e)e 2e 

< 



l-<5 l-(l + e)e l-2e' 



4.4 Proofs of Lemmas about the running time of Algorithm 4 

Proof: [of Lemma[7] We first consider the case when the input state \x) is an eigenstate \vi) of H . 
Let Pstopj be the probability that Algorithm |4] stops after stage j. Then, the square of li average 
running time of Algorithm |4] is of the order 

o (y.Pstop^ki^ (is) 

since, in first j stages we use amplitude amplification for time 

^-umq(2 ^2 -)-. .. -\- 2"^) kuniq(^ 2) 0(/b Un ig2^). 

Let j > ji + 1. The probability that, in the j th run of eigenvalue estimation, the algorithm does not 
stop is at most e. Therefore, Pji+k < e fc_1 and the expression in (|15j) is at most k^ niq times 

oo oo 

22(^+1) + < : ' '2--' < 2 2 ^ +1 > + 2 2 ^ +1 > ^(4e) J = 0(2^). 

j=i<+2 i=i 

If \x) = J^i a i\ v i)> the square of ^-average of the number of steps is of the order 

o(^>| 2 2 2 ^ 2 

because, each subspace of the form \vi) <S> Ha <£> Hs ®T-Le stays invariant throughout the algorithm 
and, thus, can be treated separately. Taking square root finishes the proof. | 
Proof: [of Lemma[8] Again, we can treat each subspace of the form \vi) (Si'Ha'&'Hs ®He separately. 
As shown in the proof of Claim [2] the probability of the algorithm stopping before stage ji is at 
most 2(ji — l)e < 2(m — l)e. Therefore, the algorithm stops at stage ji or ji + 1 with a probability 
that is at least a constant. The probability of algorithm stopping succesfully (i.e., producing |1) in 
an outcome register) is -^zjs- By Claim [TJ we have A = 0(~-). This implies that the probability 

of the algorithm stopping successfully is 0( e 2 /' ). £ 
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